Skip to main content

Self-Study: Introduction to DevSecOps & Workflows (3.1)

 

Brief

This self-study module covers the fundamental concepts of DevSecOps, its importance in modern software development, and how workflows help automate processes in a secure manner. You will learn how to integrate security into DevOps practices, understand CI/CD workflows, and explore popular tools used in the industry.

Videos

  1. What is DevSecOps?
  2. Learn the core principles of integrating security within DevOps workflows.
  3. Watch: https://www.youtube.com/watch?v=nrhxNNH5lt0&ab_channel=TechWorldwithNana
  4. Introduction to CI/CD Pipelines
  5. Understand the automation of software development using CI/CD workflows.
  6. Watch: https://www.youtube.com/watch?v=scEDHsr3APg&ab_channel=Fireship
  7. GitHub Actions: Introduction
  8. Discover how GitHub Actions can be used to automate and secure software workflows.
  9. Watch: https://www.youtube.com/watch?v=mFFXuXjVgkU&ab_channel=DevOpsJourney

Readings

  1. Introduction to DevSecOps
  2. Explore how DevSecOps integrates security into the software development lifecycle.
  3. Read: https://aws.amazon.com/what-is/devsecops/?nc1=h_ls
  4. DevSecOps Principles and Best Practices
  5. Understand key principles and best practices for implementing DevSecOps.
  6. Read: https://www.sonatype.com/resources/articles/what-is-devsecops
  7. Understanding CI/CD Pipelines
  8. Learn about the components and importance of CI/CD pipelines in software development.
  9. Read: https://www.redhat.com/en/topics/devops/what-is-ci-cd
  10. GitHub Actions Workflow Concepts
  11. Gain insights into how workflows are created and managed with GitHub Actions.
  12. Read: https://docs.github.com/en/actions/about-github-actions/understanding-github-actions

Key Concepts to Explore

  • What is DevSecOps?
  • Incorporating security early in the development lifecycle
  • Continuous security testing and monitoring
  • Collaboration between development, security, and operations teams
  • CI/CD in DevSecOps
  • Automation of code integration and deployment
  • Benefits of continuous integration (CI)
  • Role of continuous deployment (CD)
  • Security Automation Tools
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Infrastructure as Code (IaC) security scanning tools
  • GitHub Actions Workflows
  • Workflow structure (triggers, jobs, steps)
  • Using predefined and custom actions
  • Managing secrets securely in workflows

Helpful Links (References)

  1. DevSecOps Implementation Guide
  2. Learn how organizations implement DevSecOps in their workflows.
  3. https://www.btech.id/en/news/implementing-devsecops-a-comprehensive-guide/
  4. Security in CI/CD Pipelines
  5. Discover how to integrate security testing in your CI/CD workflows.
  6. https://snyk.io/platform/ci-cd-pipeline-security/
  7. AWS DevSecOps Best Practices
  8. Understand best practices for securing applications in AWS environments.
  9. https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/sec_ops_devsecops.html

Comments

Post a Comment

Popular posts from this blog

Infrastructure as Code (IaC) (Part 2 of 2)

  M2L4 Brief This self-study module introduces the fundamental concepts of Infrastructure as Code (IaC) . It covers the benefits, core principles, tools, and hands-on exercises to help you get started with IaC. Videos What is Infrastructure as Code? Understand the concept of IaC, its importance, and how it replaces manual infrastructure management with automation. Watch the video: https://www.youtube.com/watch?v=zWw2wuiKd5o&ab_channel=IBMTechnology Introduction to Terraform Get introduced to Terraform, one of the most popular IaC tools, and see how it is used to provision and manage infrastructure. Watch the video: https://www.youtube.com/watch?v=l5k1ai_GBDE&t=30s&ab_channel=TechWorldwithNana https://www.youtube.com/watch?v=tomUWcQ0P3k&ab_channel=Fireship Readings What is Infrastructure as Code? Learn the basics of IaC, its principles, and how it automates infrastructure deployment. Read more: https://aws.amazon.com/what-is/iac/ Benefits of Infrastructure as Code Un...
Post a Comment
Read more

Principles in Cloud Architecture Design

  M2L1 Brief This self-study module focuses on the core principles of cloud architecture design . It explores best practices for designing scalable, resilient, and cost-efficient systems in cloud environments. You will gain insights into foundational concepts, practical approaches, and real-world examples. Videos Principles of Cloud Architecture Understand the key principles behind designing a robust cloud architecture. Topics include scalability, elasticity, and fault tolerance. Watch the video: https://www.youtube.com/watch?v=rwuSMi_rAkM&ab_channel=WiredThinkers Scalable and Resilient Architectures Learn how to build scalable and resilient cloud applications, covering design patterns and best practices. Watch the video: https://www.youtube.com/watch?v=8vzPwflhqZU&ab_channel=ByteMonk Readings AWS Well-Architected Framework Explore the five pillars of AWS Well-Architected Framework: operational excellence, security, reliability, performance efficiency, and cost optimizatio...
Post a Comment
Read more

Network Security Best Practices

  M1L7 Brief This self-study module focuses on understanding and implementing network security best practices, especially in cloud environments like AWS. Videos Introduction to Network Security Understand the basics of network security. Watch the video: https://www.youtube.com/watch?v=NQ1cvwEvh44 AWS VPC Network Security Learn how to implement security best practices in AWS VPCs, including Security Groups and NACLs. Watch the video: https://www.youtube.com/watch?v=lkksqUDlwJE Readings Network Security Best Practices Explore industry best practices for securing cloud networks and protecting data. Read the article: https://www.cisco.com/c/en/us/products/security/what-is-network-security.html AWS Network Security Learn how to secure your AWS VPCs and instances using services like Security Groups, NACLs, and VPC Endpoints. Read the article: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Security.html Helpful Links (References) AWS CloudTrail and Amazon Detective Understand how to...
Post a Comment
Read more